Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS400909.roa
File:                     AS400909.roa (raw, json)
Hash identifier:          WBAwrPcOrHMMDc4sEEde/8rjugJRjFYepCikopFipdI=
Subject key identifier:   CB:A9:D5:7D:DF:4A:BC:CD:7B:FE:AF:A5:D9:FA:2F:FE:67:A2:C3:75
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       361B3340355191A181F441C2DCE570C5060142BF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS400909.roa
Signing time:             Thu 16 Apr 2026 08:40:53 +0000
ROA not before:           Thu 16 Apr 2026 08:35:53 +0000
ROA not after:            Thu 15 Apr 2027 08:40:53 +0000
asID:                     400909
IP address blocks:        146.103.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1b:33:40:35:51:91:a1:81:f4:41:c2:dc:e5:70:c5:06:01:42:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Apr 16 08:35:53 2026 GMT
            Not After : Apr 15 08:40:53 2027 GMT
        Subject: CN=CBA9D57DDF4ABCCD7BFEAFA5D9FA2FFE67A2C375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:3d:5b:6d:66:84:57:1a:40:50:94:7d:43:
                    35:d4:39:7e:f1:72:20:fb:5e:a7:f2:40:0f:2d:e7:
                    cb:f0:60:54:a1:8a:ac:6a:e6:13:36:b2:96:26:d0:
                    c5:3a:bb:d7:f7:d8:1a:d4:bb:89:2b:a1:eb:1d:a4:
                    89:01:ff:e9:a0:7b:92:33:2b:d7:e6:dd:ee:44:fa:
                    56:41:f3:8d:23:9a:6f:33:f0:44:c1:b7:7e:d2:52:
                    dc:46:1a:bf:6f:06:14:66:b5:45:85:7e:eb:b8:bd:
                    bc:a5:30:9a:fc:d6:b9:fd:e0:20:0b:ac:22:5f:15:
                    39:60:5b:ee:af:53:e6:b3:ff:7c:9b:94:66:c4:ca:
                    f3:69:e3:0f:52:0d:37:57:47:d0:fb:4f:ab:e8:21:
                    e1:33:f5:75:ec:4f:6a:b9:15:33:a8:ca:32:ae:06:
                    cd:51:75:70:40:47:a5:c9:69:bf:7b:8f:41:8f:6e:
                    66:3a:30:aa:89:db:a2:65:19:da:56:5d:e0:1b:a9:
                    9a:a5:db:16:e0:9f:f8:f7:2e:37:14:50:4e:2e:05:
                    6f:41:f9:85:c3:7a:f4:d0:7c:50:bf:c5:c7:0d:a7:
                    91:b2:54:05:a0:67:cf:74:31:35:10:6d:53:35:3b:
                    a3:16:99:06:c9:19:ad:58:ba:d2:ba:7c:57:1e:cd:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A9:D5:7D:DF:4A:BC:CD:7B:FE:AF:A5:D9:FA:2F:FE:67:A2:C3:75
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS400909.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.103.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:55:c3:8d:20:e5:cc:b4:88:04:45:86:e5:98:d6:d6:8d:
         b9:9d:38:c5:8e:58:82:98:fd:2b:4c:c0:3b:d4:d9:97:98:b6:
         b4:f9:cd:3c:b4:b6:49:d7:f3:b9:47:45:81:40:66:03:dd:1c:
         aa:67:92:7b:b5:4a:9b:85:ab:43:79:82:97:dc:7a:74:30:7c:
         f4:4e:55:f5:0f:df:c5:19:2f:46:cd:25:47:fb:44:ea:15:b6:
         c0:29:74:fd:02:5c:6b:aa:7d:0d:0c:a7:d5:61:ce:4f:55:76:
         95:0a:17:9e:16:a6:a2:93:58:a0:6d:af:cd:46:ca:72:7c:0f:
         05:e2:49:3f:02:03:ed:9f:81:8c:40:79:14:08:04:65:6e:62:
         6e:93:ac:97:20:1c:ab:29:ba:50:36:d5:4c:81:82:97:2b:9f:
         d7:5f:af:c0:a7:d9:74:b2:ea:fe:19:b1:98:03:85:4c:c4:44:
         ce:b6:65:89:ed:c7:d9:ad:67:ba:49:89:0a:44:e9:da:fc:5a:
         22:1e:54:94:31:1d:3e:84:23:2b:5d:80:4e:55:e3:0a:9a:e8:
         39:20:2a:4c:e2:38:67:58:9c:68:39:f6:54:72:69:2d:90:22:
         ae:5a:dd:08:22:69:2f:67:4b:86:d5:ae:7a:88:2e:d3:e4:91:
         1c:05:83:7b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNhszQDVRkaGB9EHC3OVwxQYBQr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA0MTYwODM1NTNaFw0yNzA0MTUwODQwNTNaMDMxMTAvBgNV
BAMTKENCQTlENTdEREY0QUJDQ0Q3QkZFQUZBNUQ5RkEyRkZFNjdBMkMzNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUT1bbWaEVxpAUJR9QzXUOX7x
ciD7XqfyQA8t58vwYFShiqxq5hM2spYm0MU6u9f32BrUu4kroesdpIkB/+mge5Iz
K9fm3e5E+lZB840jmm8z8ETBt37SUtxGGr9vBhRmtUWFfuu4vbylMJr81rn94CAL
rCJfFTlgW+6vU+az/3yblGbEyvNp4w9SDTdXR9D7T6voIeEz9XXsT2q5FTOoyjKu
Bs1RdXBAR6XJab97j0GPbmY6MKqJ26JlGdpWXeAbqZql2xbgn/j3LjcUUE4uBW9B
+YXDevTQfFC/xccNp5GyVAWgZ890MTUQbVM1O6MWmQbJGa1YutK6fFcezdzdAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUy6nVfd9KvM17/q+l2fov/meiw3UwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAwOTA5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkmcI
MA0GCSqGSIb3DQEBCwUAA4IBAQBa8FXDjSDlzLSIBEWG5ZjW1o25nTjFjliCmP0r
TMA71NmXmLa0+c08tLZJ1/O5R0WBQGYD3RyqZ5J7tUqbhatDeYKX3Hp0MHz0TlX1
D9/FGS9GzSVH+0TqFbbAKXT9Alxrqn0NDKfVYc5PVXaVCheeFqaik1igba/NRspy
fA8F4kk/AgPtn4GMQHkUCARlbmJuk6yXIByrKbpQNtVMgYKXK5/XX6/Ap9l0sur+
GbGYA4VMxETOtmWJ7cfZrWe6SYkKROna/FoiHlSUMR0+hCMrXYBOVeMKmug5ICpM
4jhnWJxoOfZUcmktkCKuWt0IImkvZ0uG1a56iC7T5JEcBYN7
-----END CERTIFICATE-----